Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_4a9XJRJ0R_sUYBXPYaoiRCbQrY.roa
File: _4a9XJRJ0R_sUYBXPYaoiRCbQrY.roa (raw, json)
Hash identifier: cftKy0gg8y+IiS8Mj/qIHjA2vUoYEiKPlTMdppB2hZs=
Subject key identifier: FF:86:BD:5C:94:49:D1:1F:EC:51:80:57:3D:86:A8:89:10:9B:42:B6
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01905B83A29200D80BCDD8D2037EDA54598B
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_4a9XJRJ0R_sUYBXPYaoiRCbQrY.roa
Signing time: Thu 27 Jun 2024 21:04:31 +0000
ROA not before: Thu 27 Jun 2024 21:04:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:190:5b83:55ef/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 27 Jun 2024 21:08:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5b:83:a2:92:00:d8:0b:cd:d8:d2:03:7e:da:54:59:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 27 21:04:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff86bd5c9449d11fec5180573d86a889109b42b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2f:f8:6e:6a:18:ec:22:0b:b8:33:0d:4f:ee:
6a:38:de:78:92:c6:4a:92:c2:e2:2c:99:0d:06:ca:
47:7e:1c:ad:df:11:c4:02:b4:e9:a4:89:12:b8:a5:
03:1a:c5:67:6d:cb:c9:dc:8c:2e:4c:a2:97:31:2c:
06:be:2f:ef:fa:a2:dd:9a:63:d9:ef:0d:e3:6b:ab:
21:b3:c5:03:92:d2:4d:fb:40:69:6a:2e:21:a3:0c:
93:c2:cd:51:c2:7d:fd:74:44:86:bf:5a:06:c1:49:
8b:82:8c:00:be:ce:db:db:66:5c:95:d0:6a:85:65:
d0:09:48:6f:75:34:47:62:26:2f:e9:24:8d:bd:2f:
4d:60:9f:66:58:70:fb:13:d4:c0:eb:f9:a4:3e:3a:
f4:39:7e:65:b9:65:b8:bd:b8:a2:d3:30:bb:02:a4:
66:4a:a8:69:36:b1:fd:13:39:f5:fc:ad:6d:9b:65:
c9:6e:9d:89:25:1b:71:15:2e:83:39:80:ca:a7:16:
1e:76:a2:13:ca:de:2c:dd:70:2b:2d:bc:10:3d:10:
13:98:20:9e:a4:9f:5a:8a:f3:a5:ca:14:b7:01:10:
88:c8:c6:9f:a5:2d:c8:9f:57:1d:1c:3d:82:33:83:
6c:c2:0d:a7:c9:e2:81:d6:c7:80:92:f3:71:ed:08:
f4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:86:BD:5C:94:49:D1:1F:EC:51:80:57:3D:86:A8:89:10:9B:42:B6
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/_4a9XJRJ0R_sUYBXPYaoiRCbQrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:b4:7f:92:63:f6:76:47:9f:c1:c9:72:c4:0c:ae:44:93:6b:
61:ac:b5:51:4e:83:ba:39:30:09:3f:32:5f:51:14:eb:33:92:
ec:42:3c:f7:24:8b:b5:e1:d7:bc:de:a4:be:52:f9:ef:5e:b9:
95:a9:7a:53:a4:26:02:4f:c4:69:44:dc:c1:a0:93:3a:06:b7:
28:c3:06:2f:b9:e7:99:91:fa:ce:90:b5:0e:4c:6c:80:07:f3:
3f:d2:bc:45:9c:15:ae:e3:37:42:10:1c:b2:a6:35:49:62:93:
45:b3:96:4c:d0:ea:e2:33:46:2b:ec:a4:d2:2d:13:c0:62:1e:
b7:c5:5d:d2:a9:e3:c3:db:79:9d:39:26:ef:16:46:db:ce:40:
fb:05:c8:d7:09:00:f0:74:30:ec:0b:64:8c:73:5f:e0:c3:4e:
06:09:bc:3d:e4:3e:80:4b:a4:f3:c2:ee:08:42:61:fe:9e:43:
99:50:b5:85:1b:ba:d8:35:da:f1:50:56:c6:52:aa:42:14:8c:
a2:4f:09:c3:e7:df:9f:0b:1c:10:f9:72:4d:ea:c7:dd:e6:8b:
e4:6c:8d:1e:3a:88:64:c2:f1:b3:da:12:eb:0d:7e:b5:7b:34:
0e:54:65:04:61:2d:e8:45:8b:23:ca:03:ae:66:ee:0d:a6:b0:
6b:b9:a6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 02:14:12 2024 by rpki-client on console-fra.rpki-client.org